Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
85.883exploits catalogados
40.037CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 25.956Exploit-DB 24.488GitHub PoC 17.453VulnCheck XDB 9931Nuclei 4527Metasploit 3528✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB
Python - 'socket.recvfrom_into()' Remote Buffer Overflow
Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Endpoint Protection Manager 11.0/12.0/12.1 - Remote Command Execution
The management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.40
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Endpoint Protection Manager 11.0/12.0/12.1 - Remote Command Execution
SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.74
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ultra Mini HTTPd 1.21 - 'POST' Remote Stack Buffer Overflow (2)
Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resour
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
eshtery CMS - 'FileManager.aspx' Local File Disclosure
Absolute path traversal vulnerability in Eshtery CMS allows remote attackers to read arbitrary files via a full pathname
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SolidWorks Workgroup PDM 2014 SP2 - Arbitrary File Write
Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write t
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ATutor - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
Cross-site scripting (XSS) vulnerability in mods/_standard/forums/admin/forum_add.php in ATutor 2.1.1 allows remote auth
23RIESGO
abrir ↗Exploit-DB
ILIAS 4.4.1 - Multiple Vulnerabilities
Unrestricted file upload vulnerability in ilias.php in ILIAS 4.4.1 allows remote authenticated users to execute arbitrar
23RIESGO
abrir ↗Exploit-DB
ILIAS 4.4.1 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in ilias.php in ILIAS 4.4.1 allow remote authenticated users to inje
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin AdRotate 3.9.4 - 'clicktracker.ph?track' SQL Injection
SQL injection vulnerability in library/clicktracker.php in the AdRotate Pro plugin 3.9 through 3.9.5 and AdRotate Free p
23RIESGO
abrir ↗Exploit-DB
ILIAS 4.4.1 - Multiple Vulnerabilities
ILIAS 4.4.1 allows remote attackers to execute arbitrary PHP code via an e-mail attachment that leads to creation of a .
23RIESGO
abrir ↗Exploit-DB
Stark CRM 1.0 - Multiple Vulnerabilities
Multiple cross-site request forgery (CSRF) vulnerabilities in Stark CRM 1.0 allow remote attackers to hijack the authent
23RIESGO
abrir ↗Exploit-DB
Stark CRM 1.0 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Stark CRM 1.0 allow remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PCMan FTP Server 2.07 - Remote Buffer Overflow
Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USE
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MediaWiki - 'Thumb.php' Remote Command Execution (Metasploit)
MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when DjVu or PDF file upload support is
50RIESGO
abrir ↗Exploit-DB
SolidWorks Workgroup PDM 2014 SP2 Opcode 2001 - Denial of Service
Multiple stack-based buffer overflows in pdmwService.exe in SolidWorks Workgroup PDM 2014 SP2 allow remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dassault Systemes Catia - Remote Stack Buffer Overflow
Dassault Systemes Catia V5-6R2013: Stack Buffer Overflow due to inadequate boundary checks
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ultra Mini HTTPd 1.21 - 'POST' Remote Stack Buffer Overflow (1)
Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resour
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle Forms and Reports - Remote Code Execution (Metasploit)
Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and
100RIESGO
abrir ↗Exploit-DB
Open Web Analytics 1.5.4 - 'owa_email_address' SQL Injection
SQL injection vulnerability in the password reset page in Open Web Analytics (OWA) before 1.5.5 allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
i-doit Pro - 'objID' SQL Injection
SQL injection vulnerability in the CMDB web application in synetics i-doit pro before 1.2.5 and i-doit open allows remot
23RIESGO
abrir ↗Exploit-DB
ImageMagick 6.8.8-4 - Local Buffer Overflow (SEH)
Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier allows remote
23RIESGO
abrir ↗Exploit-DB
HP Data Protector - 'EXEC_BAR' Remote Command Execution
The Backup Client Service (OmniInet.exe) in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Eudora Qualcomm WorldMail 9.0.333.0 - IMAPd Service UID Buffer Overflow
Buffer overflow in the IMAPd service in Qualcomm Eudora WorldMail 9.0.333.0 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Exploit-DB
ImageMagick 6.8.8-4 - Local Buffer Overflow (SEH)
Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick, possibly 6.8.8-5, allows remot
28RIESGO
abrir ↗Exploit-DB
CA 2E Web Option 8.1.2 - Authentication Bypass
CA 2E Web Option r8.1.2 accepts a predictable substring of a W2E_SSNID session token in place of the entire token, which
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Easy CD-DA Recorder - '.pls' Local Buffer Overflow (Metasploit)
Stack-based buffer overflow in D.R. Software Audio Converter 8.1, 2007, and 8.05 allows remote attackers to execute arbi
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Commons FileUpload and Apache Tomcat - Denial of Service
MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products,
78RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
KingScada - kxClientDownload.ocx ActiveX Remote Code Execution (Metasploit)
An unspecified ActiveX control in WellinTech KingSCADA before 3.1.2, KingAlarm&Event before 3.1, and KingGraphic before
50RIESGO
abrir ↗Exploit-DB
Titan FTP Server 10.32 Build 1816 - Directory Traversal
Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attacke
38RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.